Ensure 'Image Integrity' is correct

中レベル 1手動レビューcisco-asa

説明

Verifies integrity of an uploaded software before upgrading the system. While software is downloaded from the internet it can be corrupted, as a result, the image integrity should be verified before upgrading the system with the downloaded software. CIS assessment: Manual. Reported as SKIP with review instructions.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

CIS assessment: Manual. - Step 1: Acquire the location in the security appliance of the new image <new_image_location> and the MD5 checksum <md5_checksum> from the Cisco.com Website - Step 2: Run the following command to verify that the MD5 checksum value of the new image matches the one provided on the Cisco.com Website hostname#verify <new_image_location> <md5_checksum> Example: Asa-fw# verify disk0:asa9xx-6-k8.bin 76b5448039e642099334abbfec5a8705 Verifying file integrity of disk0:/asa9xx-6-k8.bin!!!!!!!!!!!!!!!!!! ...

修正方法

修正方法: ガイダンスまたは IaC パッチ

Download a new image from the Cisco.com website and apply the audit procedure until obtaining the message 'Verified' at the end of the output.

プロパティ

オペレーティングシステム: すべて
タグ: cisco-asanetworkhardening
参照: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.3.1 Ensure 'Image Integrity' is correct